You're seeing this page as if you were . The main menu is still yours, though. Exit from immersion
Emirhan .frE.

Emirhan .fr

CTI Analyst | OSINT | Cybercrime | Cybersecurity

€450/day
Paris, FR
3-7 years

Average response time: 4 hours

Freelancer profile translated to English.
Back to original language

About Emirhan

CTI, OSINT, and cybercrime analyst with 3 years of experience in SOC (Orange Cyberdefense, CAC40 clients). I produce cyber threat intelligence, conduct cybercrime investigations, and automate incident response. Holder of a Master's degree in Cybersecurity & AI (EFREI Paris), a DU OSINT (UTT), and a DU Cybercriminology (Paris Nanterre, supported by COMCYBER, Eurojust, and the Council of Europe).

I maintain Casus Belli, a decision-making intelligence platform on geopolitical tensions in the Middle East, Central Asia, and the Caucasus.

I also maintain OpenCrime, a Cybercrime Intelligence project.

Looking for a freelance CTI, OSINT, or cybercrime specialist? I help you identify your adversaries, understand their TTPs, and produce actionable intelligence for decision-making. Available in Paris and remotely.
  • French

    Native or bilingual

  • Turkish

    Native or bilingual

  • English

    Fluent

Can work on-site
Paris (up to 50km)

Experience

  • Confidentiel
    Confidential
    January 2026 - Today (7 months)
    Confidential investigation and intelligence mission in a sensitive environment.

    · Advanced OSINT investigations: collection and analysis of open-source data (WEBINT, SOCMINT), tracking of actors and entities on the surface web, dark web, and social networks
    · Cyber Threat Intelligence: production of intelligence reports on cybercriminal groups, analysis of their infrastructures and TTPs
    · Dark web monitoring and surveillance: identification of data leaks, illicit markets, and cybercriminal activities
    · Cybercrime investigation: tracing illicit blockchain transactions, analysis of suspicious financial flows
    OSINT CTI Threat Intelligence Cybercrime threat-intelligence
  • Orange Cyberdefense
    Xtended-SOC Analyst L2/L3
    November 2025 - March 2026 (4 months)
    L2/L3 Analyst within Orange Cyberdefense's Xtended-SOC, responsible for EDR/XDR incident analysis and investigation for large enterprise clients (CAC40).

    · EDR/XDR incident analysis and investigation (Cortex XDR, XSIAM, Sekoia) on large-scale client environments
    · Analysis of detection signals and correlation to improve alert quality and threat prioritization
    · Design of incident response playbooks (investigation, containment, remediation) via XSOAR
    · Automation of SOC processes via XSOAR and XSIAM, including integration and tuning of EDR/XDR solutions
    · Threat Hunting and behavioral analysis for advanced threat detection (APT, ransomware)
    XSOAR Threat Hunting
  • Orange Cyberdefense
    CyberSOC Analyst L2
    September 2023 - September 2025 (2 years)
    L2 CyberSOC Analyst at Orange Cyberdefense SOC, responsible for the daily management of cybersecurity incidents for large enterprise clients (CAC40).

    · Detection, analysis, and qualification of security incidents via Splunk and XSOAR (SOC orchestration and automation)
    · EDR/XDR incident response and forensic investigation on enterprise client environments
    · Creation of Splunk dashboards and alert correlation for continuous detection improvement
    · Threat Hunting and CTI analysis: identification of adversary TTPs, tracking of APT groups
    · Technical coordination with clients (CoTech) and delivery of internal cybersecurity training
    · Contribution to SOC process improvement and Cyber Threat Intelligence feed integration
    Splunk XSOAR CTI threat hunting Incident Response

Recommendations

Be the first to recommend Emirhan

Help this freelancer shine by sharing your experience working together.

These freelancer profiles also match your criteria

AgathaA

Agatha Frydrych

Backend Java Software Engineer

4.7

(3)

2

BaptisteB

Baptiste Duhen

Fullstack developer

4.6

(4)

5

AmedA

Amed Hamou

Senior Lead Developer

4

(2)

7

AudreyA

Audrey Champion

Web developer

4.3

(3)

4

Education

  • University Diploma (DU) in Cybercriminology
    Paris Nanterre University
    2026
    Cybercriminologie, droit du cyberespace, investigation numérique, analyse comportementale des cybercriminels, cybercriminalité organisée, dark web, cadre juridique cyber.
  • University Diploma (DU) in OSINT
    University of Technology of Troyes (UTT)
    2026
    OSINT avancé : WEBINT, SOCMINT, investigation open source, collecte et analyse de données publiques, traçage de personnes et entités, renseignement cyber, sources ouvertes.

Certifications

  • Google Threat Intelligence
    Google Cloud Security
    2025
  • Elastic AI Assistant for Security Operations
    Elastic
    2025

Skill set

Categories